blob: 4636b985eb961604a7822bb8bb4668f4436b48e3 [file] [log] [blame]
Mohammed Naserb7b97d62022-03-12 16:30:00 -05001# Copyright (c) 2022 VEXXHOST, Inc.
2#
3# Licensed under the Apache License, Version 2.0 (the "License"); you may
4# not use this file except in compliance with the License. You may obtain
5# a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
11# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
12# License for the specific language governing permissions and limitations
13# under the License.
14
Mohammed Naser2145fc32023-01-29 23:23:03 +000015_nova_helm_values:
Mohammed Naserb7b97d62022-03-12 16:30:00 -050016 endpoints: "{{ openstack_helm_endpoints }}"
17 labels:
18 agent:
19 compute_ironic:
20 node_selector_key: openstack-control-plane
21 node_selector_value: enabled
22 images:
Michiel Piscaer60d09f92023-01-20 18:58:55 +010023 tags: "{{ atmosphere_images | vexxhost.atmosphere.openstack_helm_image_tags('nova') }}"
Mohammed Naser01338322022-03-22 14:51:31 -040024 network:
Mohammed Naserd6db2452023-07-23 14:34:59 +000025 backend:
26 - "{{ atmosphere_network_backend | default('openvswitch') }}"
Mohammed Naser01338322022-03-22 14:51:31 -040027 ssh:
28 enabled: true
29 public_key: "{{ _nova_ssh_publickey.public_key }}"
Mohammed Naser2145fc32023-01-29 23:23:03 +000030 private_key: "{{ nova_ssh_key }}"
Mohammed Naserb7b97d62022-03-12 16:30:00 -050031 bootstrap:
32 structured:
33 flavors:
34 enabled: false
35 pod:
Mohammed Naserc6392302024-01-04 00:43:02 -050036 useHostNetwork:
37 novncproxy: false
Mohammed Naserb7b97d62022-03-12 16:30:00 -050038 replicas:
39 api_metadata: 3
40 osapi: 3
41 conductor: 3
42 scheduler: 3
43 novncproxy: 3
44 spiceproxy: 3
45 conf:
Mohammed Naser92f11502022-08-10 17:24:32 -040046 ceph:
47 enabled: "{{ atmosphere_ceph_enabled | default(true) | bool }}"
Mohammed Naserb7b97d62022-03-12 16:30:00 -050048 nova:
49 DEFAULT:
vexxhost-bota8f9cb52025-01-04 08:31:27 -050050 log_config_append: null
okozachenko7cda09a2022-04-07 23:25:03 +100051 allow_resize_to_same_host: true
Mohammed Naserb7b97d62022-03-12 16:30:00 -050052 cpu_allocation_ratio: 4.5
53 ram_allocation_ratio: 0.9
54 disk_allocation_ratio: 3.0
55 resume_guests_state_on_host_boot: true
56 osapi_compute_workers: 8
57 metadata_workers: 8
Mohammed Nasere936b492023-07-19 15:16:06 +020058 api:
59 list_records_by_skipping_down_cells: false
ricolin61202492023-06-01 12:38:10 +080060 barbican:
61 barbican_endpoint_type: internal
Mohammed Naserb7b97d62022-03-12 16:30:00 -050062 cache:
63 backend: oslo_cache.memcache_pool
64 cinder:
65 catalog_info: volumev3::internalURL
Rico Linab920612023-10-18 02:09:27 +080066 os_region_name: "{{ openstack_helm_endpoints_nova_region_name }}"
67 username: "nova-{{ openstack_helm_endpoints_nova_region_name }}"
68 password: "{{ openstack_helm_endpoints_nova_keystone_password }}"
Mohammed Naserb7b97d62022-03-12 16:30:00 -050069 conductor:
70 workers: 8
guilhermesteinmuller72a48af2022-05-06 12:29:11 -030071 compute:
72 consecutive_build_service_disable_threshold: 0
Mohammed Naserb7b97d62022-03-12 16:30:00 -050073 cors:
74 allowed_origin: "*"
75 allow_headers: "X-Auth-Token,X-OpenStack-Nova-API-Version"
Mohammed Naserc6e431b2024-03-15 01:21:44 -040076 database:
vexxhost-bot7f7b8222024-08-10 22:41:59 -040077 connection_recycle_time: 600
78 max_overflow: 50
79 max_pool_size: 5
80 pool_timeout: 30
Mohammed Naserb7b97d62022-03-12 16:30:00 -050081 filter_scheduler:
Mohammed Naser47b2ee02024-07-18 10:43:07 -040082 available_filters:
83 type: multistring
84 values:
85 - nova.scheduler.filters.all_filters
86 - nova_scheduler_filters.failure_domain_filter.FailureDomainFilter
Mohammed Naser511c3fa2022-03-17 17:54:10 -040087 enabled_filters:
88 ComputeFilter,
89 AggregateTypeAffinityFilter,
90 ComputeCapabilitiesFilter,
91 PciPassthroughFilter,
92 ImagePropertiesFilter,
93 ServerGroupAntiAffinityFilter,
Mohammed Naser47b2ee02024-07-18 10:43:07 -040094 ServerGroupAffinityFilter,
95 FailureDomainFilter
Mohammed Naserb7b97d62022-03-12 16:30:00 -050096 image_properties_default_architecture: x86_64
97 max_instances_per_host: 200
98 glance:
99 enable_rbd_download: true
Mohammed Naserf799a7b2023-07-10 18:06:38 -0400100 libvirt:
Mohammed Naserf799a7b2023-07-10 18:06:38 -0400101 live_migration_scheme: tls
Mohammed Nasera4cbb612023-07-10 20:59:58 -0400102 # TODO(mnaser): We should enable this once we figure out how to "inject"
103 # the certificates into the existing "qemu-kvm" processes.
104 # live_migration_with_native_tls: true
vexxhost-botffa3dc12024-11-07 10:55:18 -0500105 swtpm_enabled: true
106 swtpm_user: swtpm
107 swtpm_group: swtpm
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500108 neutron:
109 metadata_proxy_shared_secret: "{{ openstack_helm_endpoints['compute_metadata']['secret'] }}"
ricolin2d8dd482022-07-07 06:55:02 +0800110 oslo_messaging_notifications:
111 driver: noop
Mohammed Naserd6db2452023-07-23 14:34:59 +0000112 os_vif_ovs:
113 ovsdb_connection: unix:/run/openvswitch/db.sock
Mohammed Naser0d3e1102025-01-31 10:58:24 -0500114 privsep_osbrick:
115 helper_command: sudo nova-rootwrap /etc/nova/rootwrap.conf privsep-helper --config-file /etc/nova/nova.conf
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500116 scheduler:
vexxhost-bot77805aa2025-01-03 23:42:29 -0500117 max_attempts: 3
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500118 workers: 8
Yaguang Tang9ef098c2024-08-13 00:39:50 +0800119 discover_hosts_in_cells_interval: 30
Mohammed Naser10c23f32023-07-10 17:24:59 -0400120 vnc:
121 auth_schemes: vencrypt,none
vexxhost-botee7574e2024-07-04 19:23:26 +0200122 # NOTE(yaguang): This is not safe but a workaround before upstream bug 2039803 is fixed.
123 workarounds:
124 skip_cpu_compare_on_dest: true
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500125 nova_ironic:
126 DEFAULT:
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500127 force_config_drive: true
vexxhost-bot77805aa2025-01-03 23:42:29 -0500128 nova_api_uwsgi:
129 uwsgi:
130 chunked-input-limit: "4096000"
131 http-auto-chunked: true
132 http-raw-body: true
133 need-app: true
134 socket-timeout: 10
135 nova_metadata_uwsgi:
136 uwsgi:
137 chunked-input-limit: "4096000"
138 http-auto-chunked: true
139 http-raw-body: true
140 need-app: true
141 socket-timeout: 10
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500142 manifests:
143 deployment_consoleauth: false
144 deployment_placement: false
145 ingress_metadata: false
146 ingress_novncproxy: false
147 ingress_osapi: false
148 ingress_placement: false
vexxhost-bot77805aa2025-01-03 23:42:29 -0500149 ingress_spiceproxy: false
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500150 job_db_init_placement: false
151 job_ks_placement_endpoints: false
152 job_ks_placement_service: false
153 job_ks_placement_user: false
vexxhost-bot77805aa2025-01-03 23:42:29 -0500154 job_storage_init: false
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500155 secret_keystone_placement: false
156 service_ingress_metadata: false
157 service_ingress_novncproxy: false
158 service_ingress_osapi: false
159 service_ingress_placement: false
160 service_placement: false
vexxhost-bot77805aa2025-01-03 23:42:29 -0500161 service_ingress_spiceproxy: false
Mohammed Nasera5239662022-05-28 18:08:12 +0200162 # NOTE(mnaser): Enable this once we've got Ironic deployed.
163 statefulset_compute_ironic: false
Oleksandr Kozachenkoaf9972f2023-10-17 19:25:12 +0200164
165_nova_novnc_ingress_annotations:
166 nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
167 nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"